Geowifi - Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases (https://www.kitploit.com/2022/03/geowifi-search-wifi-geolocation-data-by.html)

Waf-Bypass - Check Your WAF Before An Attacker Does (https://www.kitploit.com/2023/03/waf-bypass-check-your-waf-before.html)

PentestGPT - A GPT-empowered Penetration Testing Tool (https://www.kitploit.com/2023/05/pentestgpt-gpt-empowered-penetration.html)

Sirius - First Truly Open-Source General Purpose Vulnerability Scanner (https://www.kitploit.com/2023/10/sirius-first-truly-open-source-general.html)

How I made 7K on Epic Games Bug Bounty

I escalated a low impact vulnerability to a critical one and received 7K! Let me show you how I did it.Continue reading on Medium »
Read more...

How to develop rootkits and malware’s in c
https://www.reddit.com/r/redteamsec/comments/18svuuj/how_to_develop_rootkits_and_malwares_in_c/

<!-- SC_OFF -->Hello everyone, ‏I study C programming language and I want to train on rootkits and malwares. I want to know what libraries and points to focus on in order to develop and learn this subject. <!-- SC_ON --> submitted by /u/Mundane-Worker-375 (https://www.reddit.com/user/Mundane-Worker-375)
[link] (https://www.reddit.com/r/redteamsec/comments/18svuuj/how_to_develop_rootkits_and_malwares_in_c/) [comments] (https://www.reddit.com/r/redteamsec/comments/18svuuj/how_to_develop_rootkits_and_malwares_in_c/)

1.14 Lab: SQL injection with filter bypass via XML encoding | 2023

This lab contains a SQL injection vulnerability in its stock check feature. The results from the query are returned in the application’s…Continue reading on Medium »
Read more...

CVE-2023–51356: ARMember <= 4.0.10 — Authenticated Privilege Escalation

Backend code of edit profile feature is vulnerable for Privilege Escalation attack. Attacker can manipulate request for getting higher roleContinue reading on Medium »
Read more...

How I made 7K on Epic Games Bug Bounty
https://medium.com/@synapticspace/how-i-made-7k-on-epic-games-bug-bounty-8529728b9fcf?source=rss------bug_bounty-5

I escalated a low impact vulnerability to a critical one and received 7K! Let me show you how I did it.Continue reading on Medium » (https://medium.com/@synapticspace/how-i-made-7k-on-epic-games-bug-bounty-8529728b9fcf?source=rss------bug_bounty-5)

1.14 Lab: SQL injection with filter bypass via XML encoding | 2023
https://cyberw1ng.medium.com/1-14-lab-sql-injection-with-filter-bypass-via-xml-encoding-2023-9794dc7bf9f4?source=rss------bug_bounty-5

This lab contains a SQL injection vulnerability in its stock check feature. The results from the query are returned in the application’s…Continue reading on Medium » (https://cyberw1ng.medium.com/1-14-lab-sql-injection-with-filter-bypass-via-xml-encoding-2023-9794dc7bf9f4?source=rss------bug_bounty-5)

CVE-2023–51356: ARMember <= 4.0.10 — Authenticated Privilege Escalation
https://revan-ar.medium.com/cve-2023-51356-armember-4-0-10-authenticated-privilege-escalation-7e0c7fbe5a79?source=rss------bug_bounty-5

Backend code of edit profile feature is vulnerable for Privilege Escalation attack. Attacker can manipulate request for getting higher roleContinue reading on Medium » (https://revan-ar.medium.com/cve-2023-51356-armember-4-0-10-authenticated-privilege-escalation-7e0c7fbe5a79?source=rss------bug_bounty-5)